CVE-1999-0433
Published Mar 21, 1999
Last updated 2 years ago
Overview
- Description
- XFree86 startx command is vulnerable to a symlink attack, allowing local users to create files in restricted directories, possibly allowing them to gain privileges or cause a denial of service.
- Source
- cve@mitre.org
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 4.6
- Impact score
- 6.4
- Exploitability score
- 3.9
- Vector string
- AV:L/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
- nvd@nist.gov
- NVD-CWE-Other
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:xfree86_project:x11r6:3.3.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C104B02C-3F3B-4DB4-8A1D-65A7DAA380EB"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:netbsd:netbsd:1.3.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2D3C937A-E9D8-474A-ABEB-A927EF7CC5B0"
},
{
"criteria": "cpe:2.3:o:netbsd:netbsd:1.3.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2A8F8DE7-7A84-4350-A6D8-FCCB561D63B2"
},
{
"criteria": "cpe:2.3:o:redhat:linux:5.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4EF44364-0F57-4B74-81B0-501EA6B58501"
},
{
"criteria": "cpe:2.3:o:redhat:linux:5.2:*:i386:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "363AB7DB-A8BA-4D58-97C4-1DF1F0F43E07"
},
{
"criteria": "cpe:2.3:o:slackware:slackware_linux:3.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "06F2131E-F9F2-4E65-B95C-B52DB25C69F5"
},
{
"criteria": "cpe:2.3:o:slackware:slackware_linux:3.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E6732144-10D4-4114-A7DA-32157EE3EF38"
},
{
"criteria": "cpe:2.3:o:slackware:slackware_linux:3.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "125918E7-53BB-407A-8D95-5D95CDF39A88"
},
{
"criteria": "cpe:2.3:o:slackware:slackware_linux:3.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CE0BBA4F-C61A-4A8E-A7E2-CE0DF76DF592"
},
{
"criteria": "cpe:2.3:o:slackware:slackware_linux:4.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CC3B1DD9-10B5-40FE-AE56-D068C41653DE"
},
{
"criteria": "cpe:2.3:o:suse:suse_linux:5.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5C0BBDD2-9FF9-4CB7-BCAF-D4AF15DC2C7C"
},
{
"criteria": "cpe:2.3:o:suse:suse_linux:5.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D1C826AA-6E2F-4DAC-A7A2-9F47729B5DA5"
},
{
"criteria": "cpe:2.3:o:suse:suse_linux:6.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F163E145-09F7-4BE2-9B46-5B6713070BAB"
},
{
"criteria": "cpe:2.3:o:suse:suse_linux:6.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "124E1802-7984-45ED-8A92-393FC20662FD"
}
],
"operator": "OR"
}
]
}
]